1. CVE-Search
  2. CVE-2016-1034
ID CVE-2016-1034
Summary The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:creative_cloud:1.0.0.183:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.0.0.183:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.0.2.189:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.0.2.189:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.1.0.213:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.1.0.213:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.1.1.220:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.1.1.220:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.1.2.232:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.1.2.232:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.2.0.248:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.2.0.248:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.2.1.260:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.2.1.260:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.3.0.322:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.3.0.322:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.4.0.348:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.4.0.348:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.4.1.351:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.4.1.351:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.5.0.367:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.5.0.367:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.5.1.369:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.5.1.369:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.6.0.393:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.6.0.393:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.7.0.413:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.7.0.413:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.7.1.418:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.7.1.418:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.8.0.447:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.8.0.447:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.9.0.465:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.9.0.465:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:1.9.1.474:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:1.9.1.474:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.0.0.74:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.0.0.74:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.0.1.88:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.0.1.88:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.1.1.110:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.1.1.110:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.1.3.121:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.1.3.121:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.2.0.129:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.2.0.129:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:2.3.0.151:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:2.3.0.151:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:3.4.1.181:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:3.4.1.181:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:3.4.2.187:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:3.4.2.187:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:3.4.3.189:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:3.4.3.189:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:3.5.0.206:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:3.5.0.206:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:creative_cloud:3.5.1.209:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:creative_cloud:3.5.1.209:*:*:*:*:*:*:*
CVSS
Base: 9.4 (as of 03-12-2016 - 03:20)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:N
refmap via4
confirm https://helpx.adobe.com/security/products/creative-cloud/apsb16-11.html
misc http://www.zerodayinitiative.com/advisories/ZDI-16-235
Last major update 03-12-2016 - 03:20
Published 12-04-2016 - 23:59
Last modified 03-12-2016 - 03:20
Back to Top